Given: Kleopatra should not/cannot be run under admin user
Given: the SSIS automation service account is necessarily an admin user
How can one transfer a keypair to SSIS automation service account using Kleopatra so that an SSIS package can use an Execute Process task to execute gpg commands?
Hi @OldV,
I’m not sure I understand your problem.
Aside from general security practice to avoid to run GUI programs with root or admin rights: The main issue with running Kleopatra with admin rights is that it messes up the permissions for the “normal” user who is logged in. If you have a dedicated account for SSIS which is not used otherwise and has elevated rights anyway, you could use Kleopatra there.
You could also create a key on the command line in the SSIS account with gpg --generate-key. Or create one with Kleopatra with a regular user account, save the secret key backup, transfer it to the SSIS account and import it on the command line with gpg --import FILENAME
By the way, starting from Gpg4win 5.1 trying to start Kleopatra as admin will result in an error instead of a warning. The error message will give information which registry key to set if you need to remove the restriction and do it anyway.
@eebb thank you very much for being willing to help me out.
First, what I’m asking about can be accomplished via command lines. generate-key with lower rights user then import with elevated privileges user. However, Kleopatra is a very useful in generating the keys and seeing things for a level of confidence. It would be helpful to be able to do the import and management of keys for the elevated privileges account via Kleopatra for the visual element that builds confidence.
So, in conclusion what I’m trying to do is the “import” portion of managing keys. I want to use Kleopatra to import the signing and encrypting keys for the elevated privileges user.
@OldV I’m happy that you find Kleopatra useful 
So start Kleopatra as that user.
You can use Kleopatra as admin user if you want to do this. In Gpg4win 5.0.2. Kleopatra will give a warning only, which you can ignore if you are so inclined.
Does Kleopatra not give the warning in your case and just does not start as admin?
In that case: Which Gpg4win version are you using?
Importing a secret or a public key with Kleopatra is pretty self explanatory, I can’t imagine that you want me to tell you how to do that. Please say if this is the issue. Or maybe you don’t know hot to export a secret key? Or is the key word for you the “portion of a key”? Do you mean you only want to import a subkey and don’t know how to do that?
Please ask a concrete question, otherwise we can not help you.